Lists every AI agent discovered for the authenticated tenant, with rollups derived on read: device count, current posture score, current risk score/level, and business-purpose classification (D26). Returns an empty array if the tenant has no discovered agents yet — never a 404.